CVE-2007-3476
Fixed in a distro release EPSS 2%
Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash and heap corruption) via large color index values in crafted image data, which results in a segmentation fault.
Products: gd_graphics_library gdlib
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libgd2 | 2.0.35.dfsg-1 |
| Debian 12 | libwmf | no fix |
| Debian 12 | racket | 5.0.2-1 |
| Debian 13 | libgd2 | 2.0.35.dfsg-1 |
| Debian 13 | libwmf | no fix |
| Debian 13 | racket | 5.0.2-1 |
| Debian 14 | libgd2 | 2.0.35.dfsg-1 |
| Debian 14 | libwmf | no fix |
| Debian 14 | racket | 5.0.2-1 |
| Debian 4.0 | libgd2 | 2.0.33-5.2etch1 |
| Red Hat Enterprise Linux 4 | gd | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat Enterprise Linux 4 | gd-debuginfo | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat Enterprise Linux 4 | gd-devel | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat Enterprise Linux 4 | gd-progs | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat Enterprise Linux 5 | gd | 0:2.0.33-9.4.el5_1.1 |
| Red Hat Enterprise Linux 5 | gd-debuginfo | 0:2.0.33-9.4.el5_1.1 |
| Red Hat Enterprise Linux 5 | gd-devel | 0:2.0.33-9.4.el5_1.1 |
| Red Hat Enterprise Linux 5 | gd-progs | 0:2.0.33-9.4.el5_1.1 |